Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: pmvegXFfI2Gdw3DjuKgtyTgWunXsLB83kGXEgWamFSo=
Subject key identifier: BF:7E:B7:9D:BF:A8:B3:83:C7:7F:F3:59:BA:72:8C:EE:D9:BA:33:34
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019D269645C667670377349C3F74A27A60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 20:01:15 +0000
Manifest this update: Wed 25 Mar 2026 20:01:15 +0000
Manifest next update: Thu 26 Mar 2026 20:01:15 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: 5g4V2NwM7mYBVF5o3jJfJD7lXDrG8TYVvK+ecilfqd0=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:45:c6:67:67:03:77:34:9c:3f:74:a2:7a:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Mar 25 20:01:15 2026 GMT
Not After : Mar 26 20:01:15 2026 GMT
Subject: CN=bf7eb79dbfa8b383c77ff359ba728ceed9ba3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:48:0e:c8:10:73:da:95:be:af:d0:11:0c:
d2:3c:4b:0f:8c:4b:98:ec:ce:b3:bf:d3:32:12:da:
52:87:ab:b3:87:df:2b:c9:0e:9e:62:99:ff:81:1b:
43:aa:3d:5a:e1:52:e7:f3:0e:e7:91:0f:e5:b2:4f:
74:9c:f5:15:ad:a5:1b:65:ba:17:a0:1a:08:65:7a:
2d:ad:dd:a0:09:dc:ea:e6:14:6a:a1:46:b8:d3:86:
26:78:af:96:cb:52:ac:54:5c:94:6d:ef:a8:e2:9e:
98:a1:8b:3e:21:2d:a7:bb:7d:bf:8a:11:46:98:f2:
36:14:6e:5e:1f:e1:29:32:95:99:20:99:0a:6a:7e:
8d:b8:ff:fd:b9:7f:48:28:0d:0b:fb:a9:17:1b:15:
11:ea:35:ee:82:0f:ba:50:e8:81:7a:35:1e:80:3a:
58:c0:63:bd:cd:78:33:9c:a1:d0:af:a6:64:64:c8:
de:41:aa:cc:08:78:5c:57:48:98:72:95:f8:86:42:
4e:6f:fc:48:d7:3c:01:1b:42:ca:ef:e2:48:74:1b:
c6:de:02:07:a4:4d:5a:4c:ce:47:6c:d2:4e:8b:96:
8f:0d:5b:af:23:b9:82:3f:df:e9:9a:3d:39:92:b6:
24:ce:94:15:4c:3c:73:a4:5a:b1:94:e4:8d:cf:f9:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:B7:9D:BF:A8:B3:83:C7:7F:F3:59:BA:72:8C:EE:D9:BA:33:34
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e8:45:cc:09:a8:f3:56:02:0d:2f:2b:40:27:73:67:dd:bb:
de:52:e9:ad:d4:e1:10:c2:bb:b3:60:57:7e:38:d9:d3:2b:39:
07:8b:1a:21:d2:3c:14:64:be:c9:17:ec:7d:60:8a:b6:0d:ab:
a0:08:b3:a0:e2:3e:23:50:3f:aa:32:6f:59:7c:de:73:14:b1:
a3:98:5b:43:8b:f0:40:b0:23:78:1d:5e:e1:85:dc:7b:ab:fb:
67:66:cd:d9:6a:76:a8:44:83:cc:90:dd:c1:ae:9d:68:5d:0b:
14:82:86:0e:9c:4c:30:22:94:da:bb:f3:a7:15:94:25:5f:f3:
74:3a:76:59:e1:e1:40:f6:c3:ce:fb:7e:1f:88:f4:58:43:0c:
8e:27:ba:0e:ea:ee:66:bd:41:44:ae:c9:28:77:5b:59:ed:a9:
75:cd:c5:f7:e9:86:d2:f0:a9:0d:0d:46:d8:16:1d:60:be:2d:
38:f7:2d:f7:e5:83:2e:4b:db:6c:42:18:78:71:69:1a:75:9c:
a2:ee:27:b7:3f:7e:a1:c0:7b:a2:83:9a:9b:64:b0:20:b3:71:
c8:d4:be:71:d8:e0:6e:2f:34:55:e3:e1:09:e0:01:8b:65:4a:
79:0d:37:c0:54:2e:2d:26:67:97:04:05:54:40:67:9b:cd:ca:
6d:8c:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client